Manifest
$ rpki-client -vvf rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
File: lPhZ34Ux35GpQAj0tJIKQSPrDws.mft (raw, json)
Hash identifier: QXftJCqLWft605pHKvtoXLjChW7b9u2+WNLvTFauXcg=
Subject key identifier: 94:29:71:66:07:DE:61:22:55:41:F5:33:6B:3D:C0:74:95:44:43:9C
Authority key identifier: 94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
Certificate issuer: /CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Certificate serial: 019D38660CDB878126AF55484E94D88E6FC5
Authority info access: rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject info access: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
Manifest number: 1716
Signing time: Sun 29 Mar 2026 07:01:45 +0000
Manifest this update: Sun 29 Mar 2026 07:01:45 +0000
Manifest next update: Mon 30 Mar 2026 07:01:45 +0000
Files and hashes: 1: lPhZ34Ux35GpQAj0tJIKQSPrDws.crl (hash: H9alabcuDeWqzyc5ryrvhmRSdgU76lQ+vOAYTZKXI/g=)
Validation: OK
Signature path: rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.crl
rsync://rpki.ripe.net/repository/DEFAULT/KpSo3VVK5wEHIJnHC2QHVV3d5mk.mft
rsync://rpki.ripe.net/repository/aca/KpSo3VVK5wEHIJnHC2QHVV3d5mk.cer
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.crl
rsync://rpki.ripe.net/repository/aca/7DNNDzoYvgAht7joQih2Qayxcxo.mft
rsync://rpki.ripe.net/repository/ec334d0f3a18be0021b7b8e842287641acb1731a.cer
rsync://rpki.ripe.net/repository/ripe-ncc-ta.crl
rsync://rpki.ripe.net/repository/ripe-ncc-ta.mft
rsync://rpki.ripe.net/ta/ripe-ncc-ta.cer
Signature path expires: Mon 30 Mar 2026 07:00:17 +0000
Certificate:
Data:
Version: 3 (0x2)
Serial Number:
01:9d:38:66:0c:db:87:81:26:af:55:48:4e:94:d8:8e:6f:c5
Signature Algorithm: sha256WithRSAEncryption
Issuer: CN=94f859df8531df91a94008f4b4920a4123eb0f0b
Validity
Not Before: Mar 29 07:01:45 2026 GMT
Not After : Mar 30 07:01:45 2026 GMT
Subject: CN=9429716607de61225541f5336b3dc0749544439c
Subject Public Key Info:
Public Key Algorithm: rsaEncryption
RSA Public-Key: (2048 bit)
Modulus:
00:ab:dd:a8:e6:55:bf:c3:a2:6e:63:81:30:66:af:
3d:56:20:28:91:73:dd:98:ad:bb:3a:f3:a6:7c:ad:
ab:45:66:1d:1b:de:33:fc:44:04:0e:b9:09:9f:0e:
4a:52:02:38:b3:8c:b0:10:22:03:03:cd:e4:a6:57:
11:21:8b:cc:95:17:ea:b7:8d:12:e2:83:3c:1b:58:
17:9a:55:4f:1a:f0:94:19:ac:d5:98:4a:c9:f2:a2:
e3:6a:ed:07:e8:04:4d:fc:b3:df:33:3c:1d:10:1f:
85:83:c9:1f:49:a5:ca:6b:7d:13:f6:70:95:05:c8:
c5:28:97:c0:b8:6f:38:2f:8c:8d:40:d6:fb:c3:9d:
5e:98:8e:24:36:d7:ce:2f:97:35:95:26:f1:f4:d3:
57:9c:ad:cd:f2:95:5a:d4:f1:14:2d:43:a6:e1:94:
7b:a3:87:f2:3c:aa:4f:1e:f7:9a:7f:3a:31:b4:2e:
57:68:92:fe:c7:62:01:76:e3:e7:e0:f3:0d:12:79:
fe:15:dc:a3:9e:ab:a0:b4:2a:11:c5:b7:21:47:c9:
81:9c:62:58:cb:5c:0c:c3:f6:0c:f2:87:b8:45:f8:
54:88:66:25:fa:57:0b:71:96:99:00:ef:93:7f:e1:
e0:9e:c1:eb:3e:e0:6c:56:12:67:39:28:a7:6d:4d:
ce:77
Exponent: 65537 (0x10001)
X509v3 extensions:
X509v3 Subject Key Identifier:
94:29:71:66:07:DE:61:22:55:41:F5:33:6B:3D:C0:74:95:44:43:9C
X509v3 Authority Key Identifier:
keyid:94:F8:59:DF:85:31:DF:91:A9:40:08:F4:B4:92:0A:41:23:EB:0F:0B
X509v3 Key Usage: critical
Digital Signature
Authority Information Access:
CA Issuers - URI:rsync://rpki.ripe.net/repository/DEFAULT/lPhZ34Ux35GpQAj0tJIKQSPrDws.cer
Subject Information Access:
Signed Object - URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.mft
X509v3 CRL Distribution Points:
Full Name:
URI:rsync://rpki.ripe.net/repository/DEFAULT/60/dc9224-3cd7-437d-a1dc-e8c39cf66b3f/1/lPhZ34Ux35GpQAj0tJIKQSPrDws.crl
X509v3 Certificate Policies: critical
Policy: ipAddr-asNumber
sbgp-ipAddrBlock: critical
IPv4: inherit
IPv6: inherit
sbgp-autonomousSysNum: critical
Autonomous System Numbers:
inherit
Signature Algorithm: sha256WithRSAEncryption
c1:a1:65:58:96:25:8f:9c:48:71:19:2f:d3:ac:9d:3a:06:1f:
39:37:04:6d:3f:9b:70:f4:f6:11:d2:3b:c9:e6:b9:d4:ce:86:
8f:b2:0d:11:e4:db:d4:84:fe:fc:65:0a:6f:87:5c:38:e9:78:
68:4d:e4:40:2a:8d:02:ab:b7:51:87:92:af:0f:57:99:71:f4:
9b:42:69:25:18:d8:ac:77:f0:6c:58:80:be:56:ae:af:7f:5a:
2c:4b:48:ad:36:fb:5b:96:20:81:8e:2d:48:4f:ce:52:72:f2:
8d:cf:c3:39:99:f6:4f:ec:6b:14:5f:b5:8b:1f:6f:46:55:52:
ed:3f:0f:5f:68:c5:5a:7b:23:01:8c:48:0c:86:dd:1d:81:92:
d9:9a:0f:d1:6e:46:e8:4b:3b:0e:e1:51:fe:32:bf:0b:7d:94:
65:73:24:29:60:7f:82:0c:f2:bd:18:b2:2d:fb:4c:ab:cd:42:
a2:e2:ad:0d:84:e9:2c:01:4e:c0:ed:99:6b:25:a0:d7:c4:b6:
d6:98:91:a5:2f:26:ed:2c:59:70:32:8e:e1:af:73:3e:67:47:
25:ea:2e:39:c6:83:2a:21:0d:20:ea:15:88:16:c2:f1:6c:de:
80:17:8c:7d:60:01:04:2c:e8:00:ac:0a:52:04:85:26:7a:53:
56:36:23:29
-----BEGIN CERTIFICATE-----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-----END CERTIFICATE-----
Generated at Sun Mar 29 12:49:11 2026 by rpki-client